Responsive Lightbox & Gallery

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 49% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ Michał

   2mo ago

   really like it!

   Read on wp.org ↗
2. ★★★★★ leifbength

   2mo ago

   Tillfällig lösning

   Read on wp.org ↗
3. ★★★★★ Georg

   2mo ago

   Perfekte Technik, mit der ich eine wunderschöne Galerie habe erstellen können. Dankeschön für dieses tolle PlugIn!

   Read on wp.org ↗
4. ★★★★★ txemart

   3mo ago

   It has many features that complement the use of a pop-up window!!!

   Read on wp.org ↗
5. ★★★★★ eidetic

   3mo ago

   I don’t use my blog much any more, but I’ve never had any issues with the theme.

   Read on wp.org ↗
6. ★★★★★ Jennifer Soucy

   4mo ago

   Does exactly what it says on the tin, hasn’t caused issues, win.

   Read on wp.org ↗
7. ★★★★★ wcedudenhofen

   5mo ago

   Hat super geklappt

   Read on wp.org ↗
8. ★★★★★ naucalaa29

   5mo ago

   easy to configure, great to use it

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.7.8 New: Add AVIF support across core galleries, built-in lightboxes, and Remote Library workflows Fix: Prevent Media Library toolbar and modal regressions 2.7.8
2. — Version 2.7.7 Security: Fix Featherlight comments XSS via safe URL handling Security: Fix prettyPhoto and TosRUS lightbox URL injection sinks Fix: Restore Featherlight image viewport sizing Fix: Preserve cache-busted image lightbox UR 2.7.7
3. — Version 2.7.6 Fix: Restore built-in gallery inline styles after proactive asset preloading 2.7.6
4. — Version 2.7.5 Fix: Restore widget rendering when comments lightbox filtering runs, including Archives dropdown markup Tweak: Preload built-in gallery assets earlier for gallery pages and shortcode requests 2.7.5
5. — Version 2.7.4 Fix: Make gallery title sorting independent of lightbox title setting Fix: Guard early user option reads in folders to prevent undefined array key errors Fix: Guard early folder user option reads for better error handlin 2.7.4
6. — Version 2.7.3 Fix: Prevent bootstrap fatal on malformed options Fix: Harden option/meta type guards to prevent fatal errors when stored option/meta values are non-array 2.7.3

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Responsive Lightbox & Gallery <= 2.7.6 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-24 CVE-2026-56041 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.7.6 Patched in 2.7.7
2. Medium · 5.0 Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload ↗
   2026-02-24 CVE-2026-2479 Server-Side Request Forgery (SSRF) Affects <= 2.7.1 Patched in 2.7.2
3. High · 7.2 Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-02-03 CVE-2025-15386 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.6.1 Patched in 2.6.1
4. Medium · 5.4 Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery ↗
   2025-11-18 CVE-2025-12359 Server-Side Request Forgery (SSRF) Affects <= 2.5.3 Patched in 2.5.4
5. High · 7.2 Responsive Lightbox & Gallery <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting ↗
   2025-09-15 CVE-2025-9710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.2 Patched in 2.5.3
6. Medium · 6.4 Responsive Lightbox & Gallery <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-06-06 CVE-2025-5093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.1 Patched in 2.5.2
7. Medium · 6.4 Responsive Lightbox & Gallery <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-24 CVE-2025-3742 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.0 Patched in 2.5.1
8. Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library ↗
   2025-03-04 CVE-2024-5667 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.7 Patched in 2.4.8
9. Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library ↗
   2024-12-03 CVE-2024-5020 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.8 Patched in 2.4.9
10. Medium · 6.4 Responsive Lightbox <= 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-10-15 CVE-2024-49282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.8 Patched in 2.4.9
11. Medium · 5.3 Responsive Lightbox <= 2.4.7 - Missing Authorization ↗
    2024-08-26 CVE-2024-43924 Missing Authorization Affects <= 2.4.7 Patched in 2.4.8
12. Medium · 6.4 Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload ↗
    2024-08-21 CVE-2024-6870 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.7 Patched in 2.4.8
13. Medium · 4.3 Responsive Lightbox <= 2.4.6 - Missing Authorization via Information Disclosure ↗
    2024-04-05 CVE-2024-31252 Missing Authorization Affects <= 2.4.6 Patched in 2.4.7
14. Medium · 6.4 Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name ↗
    2023-11-29 CVE-2023-49174 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.5 Patched in 2.4.6
15. Medium · 5.5 Responsive Lightbox & Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2022-11-04 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.1 Patched in 2.4.2
16. Medium · 6.1 Responsive Lightbox & Gallery <= 1.7.1 - Cross-Site Scripting ↗
    2016-12-01 CVE-2017-2243 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1 Patched in 1.7.2
17. Medium · 6.1 PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting ↗
    2014-08-01 CVE-2013-6837 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.4.12 Patched in 1.4.12

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 36 languages, 2 at 90% or more

Plus 12 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-29 200K+ → 100K+ down after 1 days in tier
2. 2024-11-28 100K+ → 200K+ up after 1 days in tier
3. 2024-11-27 200K+ → 100K+ down after 2 days in tier
4. 2024-11-25 100K+ → 200K+ up after 1 days in tier
5. 2024-11-24 200K+ → 100K+ down after 1 days in tier
6. 2024-11-23 100K+ → 200K+ up after 1 days in tier
7. 2024-11-22 200K+ → 100K+ down after 3 days in tier
8. 2024-11-19 100K+ → 200K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Firelight Lightbox 200K+ installs · 4.8★ · 3 shared tags A
• S Simple Lightbox 100K+ installs · 4.3★ · 3 shared tags B
• Lightbox & Modal Popup WordPress Plugin – FooBox 100K+ installs · 3.9★ · 3 shared tags B
• LightPress Lightbox 40K+ installs · 4.5★ · 3 shared tags A
• Lightbox for Gallery & Image Block 20K+ installs · 4.9★ · 3 shared tags A
• WP Lightbox 2 20K+ installs · 4.3★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Responsive Lightbox & Gallery into a readme, a review or a deck. It updates itself.

Responsive Lightbox & Gallery: 100K+ active installs, 4.9★ (1,999 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/responsive-lightbox